$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/SEHK8gyIw14id1261JYPcPzqSko.roa File: SEHK8gyIw14id1261JYPcPzqSko.roa (raw, json) Hash identifier: m8XuEHZu4bYbuKaBFnrymsalKZL1OpJdv974yEazidU= Subject key identifier: 48:41:CA:F2:0C:88:C3:5E:22:77:5D:BA:D4:96:0F:70:FC:EA:4A:4A Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 116F Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/SEHK8gyIw14id1261JYPcPzqSko.roa Signing time: Fri 01 Sep 2023 03:14:21 +0000 ROA not before: Fri 01 Sep 2023 03:14:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 396982 IP address blocks: 101.102.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 11:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4463 (0x116f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Sep 1 03:14:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4841CAF20C88C35E22775DBAD4960F70FCEA4A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:13:11:81:88:94:4c:32:f5:ef:0c:c9:6a: 88:0e:3a:ea:a1:ac:a6:df:51:19:ad:6f:05:80:3a: 79:a5:25:6c:91:e5:2c:48:35:4f:0d:2b:8b:cf:e3: 4a:9b:43:e0:76:76:db:b7:60:97:04:d3:15:17:35: e5:a0:bc:0f:56:f9:85:99:36:d9:76:cd:22:83:50: 90:89:8a:61:fb:4a:5d:f2:6e:5c:56:a9:63:1a:19: ab:00:e1:2e:fd:38:3e:20:94:2f:42:bb:89:38:9e: 69:79:c7:62:cd:e9:04:69:2d:3d:66:48:d1:87:36: 45:a1:ab:2b:07:dc:64:a7:19:36:3f:5d:1f:a2:e6: 3a:ec:0a:d3:ba:12:89:01:f5:09:1d:bb:88:37:6b: 96:7c:46:eb:07:1a:d9:e2:c6:3e:a2:1c:5d:b5:33: 67:f9:94:23:47:75:1a:2c:00:15:74:01:e3:aa:74: 40:64:f1:8a:03:cb:a5:c1:0e:98:11:a7:76:d3:e3: 14:47:79:a7:e8:2f:66:cd:78:36:40:d4:a0:a9:bb: 04:db:a5:1f:ac:cd:ed:78:81:6f:f3:74:66:a7:0c: 6c:71:da:9d:29:72:6c:f7:4c:8e:55:a0:cb:fc:9e: 8c:4b:11:f7:4f:03:1d:9a:0c:86:54:42:33:03:b8: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:41:CA:F2:0C:88:C3:5E:22:77:5D:BA:D4:96:0F:70:FC:EA:4A:4A X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/SEHK8gyIw14id1261JYPcPzqSko.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.102.103.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b1:79:05:8a:46:3c:83:74:fb:8c:05:2d:06:a3:26:78:43: ae:ff:8d:5a:63:4d:15:f3:91:6a:a4:aa:84:ec:c0:79:eb:03: 5c:b1:b3:41:cc:72:9c:e4:58:42:45:c6:d9:ee:85:d3:85:74: 4a:70:47:7e:3f:67:39:87:b9:dc:73:ef:5c:c3:6d:c3:65:78: c0:d5:e2:83:cd:74:21:b4:10:fd:b0:8f:09:7f:e7:f9:7e:41: 47:02:44:15:11:ef:39:c3:7f:0c:21:44:6a:50:46:6c:40:86: ca:09:47:e1:6b:23:f9:25:16:85:35:11:32:1c:68:01:85:a3: f6:1b:92:bf:72:52:e3:3d:43:0e:fa:cd:54:37:d6:a3:78:10: 40:07:d6:dd:0f:c2:d5:88:5d:a5:f6:f1:4a:c0:10:39:18:8b: 8c:5d:e5:69:b4:fe:0c:3d:9d:84:c0:90:95:3c:d7:87:21:35: 2e:57:53:13:21:dd:a9:29:8d:99:a5:29:95:f2:cc:66:d4:aa: 76:77:be:3f:a9:d3:ba:a7:e8:65:a8:ac:6f:98:14:bb:12:6e: 65:c9:47:9b:de:59:63:e8:15:90:29:5a:61:01:37:e7:48:79: e9:8b:a9:7d:7b:9c:15:72:c9:b5:4d:90:15:d4:49:c4:5e:c5: 18:05:66:76 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMzA5MDEw MzE0MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ4NDFDQUYyMEM4OEMz NUUyMjc3NURCQUQ0OTYwRjcwRkNFQTRBNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRCBMRgYiUTDL17wzJaogOOuqhrKbfURmtbwWAOnmlJWyR5SxI NU8NK4vP40qbQ+B2dtu3YJcE0xUXNeWgvA9W+YWZNtl2zSKDUJCJimH7Sl3yblxW qWMaGasA4S79OD4glC9Cu4k4nml5x2LN6QRpLT1mSNGHNkWhqysH3GSnGTY/XR+i 5jrsCtO6EokB9Qkdu4g3a5Z8RusHGtnixj6iHF21M2f5lCNHdRosABV0AeOqdEBk 8YoDy6XBDpgRp3bT4xRHeafoL2bNeDZA1KCpuwTbpR+sze14gW/zdGanDGxx2p0p cmz3TI5VoMv8noxLEfdPAx2aDIZUQjMDuMxDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUSEHK8gyIw14id1261JYPcPzqSkowHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9TRUhLOGd5SXcxNGlkMTI2MUpZ UGNQenFTa28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWZn MA0GCSqGSIb3DQEBCwUAA4IBAQCFsXkFikY8g3T7jAUtBqMmeEOu/41aY00V85Fq pKqE7MB56wNcsbNBzHKc5FhCRcbZ7oXThXRKcEd+P2c5h7ncc+9cw23DZXjA1eKD zXQhtBD9sI8Jf+f5fkFHAkQVEe85w38MIURqUEZsQIbKCUfhayP5JRaFNREyHGgB haP2G5K/clLjPUMO+s1UN9ajeBBAB9bdD8LViF2l9vFKwBA5GIuMXeVptP4MPZ2E wJCVPNeHITUuV1MTId2pKY2ZpSmV8sxm1Kp2d74/qdO6p+hlqKxvmBS7Em5lyUeb 3llj6BWQKVphATfnSHnpi6l9e5wVcsm1TZAV1EnEXsUYBWZ2 -----END CERTIFICATE-----Generated at Mon May 6 00:11:14 2024 by rpki-client on console-fra.rpki-client.org